Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15270114F4A511EF8995547F762E951A.roa
File: 15270114F4A511EF8995547F762E951A.roa (raw, json)
Hash identifier: kfhmIA7igLCoIto3CAUa1fPlk2rm7mCs3w4HgTV3LFk=
Subject key identifier: ED:79:C3:AF:2E:3A:1C:8F:FA:FD:EF:EC:F8:69:AE:B5:E4:BD:A7:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 013894
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15270114F4A511EF8995547F762E951A.roa
Signing time: Thu 27 Feb 2025 00:52:13 +0000
ROA not before: Thu 27 Feb 2025 00:00:09 +0000
ROA not after: Sat 19 Feb 2028 00:00:09 +0000
asID: 17561
IP address blocks: 156.229.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80020 (0x13894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR
Validity
Not Before: Feb 27 00:00:09 2025 GMT
Not After : Feb 19 00:00:09 2028 GMT
Subject: CN=67bfb73d-f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:2e:a0:af:c4:14:8d:51:a9:d9:13:01:7e:
d5:b4:32:fd:45:84:61:94:f0:81:52:f4:24:35:da:
89:e3:40:14:dc:38:61:d3:d4:2a:e4:ee:eb:ca:de:
50:33:bb:3f:b3:e1:b4:c5:d0:5f:31:c4:07:d0:c7:
da:da:47:40:1b:06:85:94:e4:a2:ee:ef:79:45:77:
6f:30:91:b8:c1:b3:8d:84:4c:33:2a:62:3d:f5:f4:
a1:d4:2d:b0:21:5f:9d:45:09:67:f0:3f:07:10:10:
ea:aa:74:93:56:42:53:42:ee:10:03:49:59:72:e9:
34:96:75:c9:f5:1c:ef:45:21:76:44:6d:82:b7:4c:
30:e0:03:61:23:63:a2:d3:b0:98:ac:cf:6e:e6:cd:
f6:73:15:df:2f:37:66:f8:df:96:1f:b7:67:72:80:
6f:fd:bb:a6:c4:9f:b0:3e:d9:a0:7e:ec:81:e9:c8:
ae:c6:c6:51:46:9c:7a:cc:cd:88:e0:34:88:80:7c:
de:59:00:ee:c8:4a:06:97:ed:e5:82:3b:8b:07:61:
5f:ec:79:84:16:4a:2e:93:f6:ca:2e:7b:e2:06:56:
9c:ed:fd:ad:78:41:7c:a0:f0:91:5d:a4:0e:a9:fb:
13:49:4a:bb:7d:9a:dc:21:4b:35:11:d1:dd:1b:25:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:C3:AF:2E:3A:1C:8F:FA:FD:EF:EC:F8:69:AE:B5:E4:BD:A7:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15270114F4A511EF8995547F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:9c:59:d3:31:04:e5:dd:84:07:e8:0d:51:74:71:ca:5c:8a:
12:57:51:91:a7:fa:c3:d4:a1:70:c0:3f:14:b0:85:7d:75:b3:
f3:5e:ed:86:14:3f:91:87:1c:bc:a7:82:5e:4b:e8:6b:df:53:
ca:f6:83:45:cc:0b:c1:6f:15:30:bb:d6:a2:0e:4b:e9:d2:89:
b4:23:30:5f:f3:9f:ab:5e:0b:59:49:34:30:9f:29:85:dc:d4:
01:22:26:aa:2e:5c:9c:01:44:7c:e0:06:f7:af:9f:65:81:94:
b2:f2:ae:97:ec:4f:56:61:d9:a7:00:17:c3:c2:25:57:ac:de:
86:38:d5:df:05:a5:89:09:ae:31:00:5b:06:25:a2:70:b4:dc:
06:91:fb:13:d6:40:8a:0e:df:0e:03:5a:cb:2c:e8:d7:af:0c:
34:b8:09:04:2c:29:56:61:91:5b:5a:3e:74:ef:9d:27:6b:a0:
60:f5:5a:59:0e:ad:57:84:f9:89:d1:83:71:78:98:43:f4:d0:
d7:c3:74:5b:86:df:e9:3f:ef:07:c0:d2:2c:56:48:03:30:5f:
e4:11:34:61:07:2d:af:56:e3:8d:a5:cc:8b:77:46:b9:01:af:
b0:8d:6c:20:c9:ae:54:21:90:11:51:d1:1f:04:72:f6:e9:ab:
e9:e9:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:24:53 2025 by rpki-client